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GENERAL SOLUTION FOR THE DOUBLE TRANSPOSITION CIPHER 



Section I 



Nature of investigation. 
Purpose of this paper.., 



INTRODUCTORY REMARKS 

Pangnph 



Suipmary of conclusions. 



Pangntdi 

3 




1. Katore of investigation. — It is known that, two or more messages of identical length,- 
enciphered by means of a double transposition system, may be read by anagramming. It was 
conjectured that the very nature of the system is such that some pBeudomathematical 
procedure could be devised for the solution of single messages or messages of different lengths 
enciphered by means of a double transposition system. .. 

2. Purpose of this paper. — This paper was written for the purpose of setting forth in detail 
the results of a study for a general method of solution of the double transposition cipher system. 
The method herein described is novel in cryptography and presents a principle which may be 
of value for other types of transposition. A preliminary knowledge of the more important and 
fundamental principles of cryptanalysis, particularly with regard to transposition systems, is 
advisable, though not absolutely necessary, for a proper understanding of the details of this 
analysis. Reference is therefore made to Signal Corps Training Pamphlet No. 3, “Elements of 
Cryptanalysis”, wherein will be found elucidated the basic principles of the science. The 
method of procedure, though mathematical in nature, makes no heavy demands on the mathe- 
matical knowledge and ability of the reader. 

3. Summary of conclusions. — It is shown in this paper that it is possible to solve a single 
message, or several messages of different lengths enciphered by means of a double transposition 

y&pher system. The ease and speed with which the solution may be attained will depend on the 
number of cryptanalysts, the general situation, etc., and no attempt has been made to estimate 
an average time of solution. 

(l) 
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Section II 

ANALYSIS OF SYSTEM AND GENERAL PROCEDURE 



. Paragraph 

Number of different cipher resultants possible 
with given key and message 7 



Paragraph 

General considerations 4 

Notation 5 

Plain-text cipher-text relationships 6 

4. General considerations. — The general method herein presented for the solution of a 
double transposition ciphpr involves some potions which may not be familiar *nd are therefore 
discussed in this section. 

Consider the fundamental element of a transposition method. Transposition is a process 
which does not change the identity of the letters of a message but does change their relative 
positions. As a result of any transposition, the separate lsttprp of the plain text are rearranged 
jltt Mtne new order. It will be found of value to otrasider this process as one in which a letter 
of the plain text is replaced by some other letter of the plain text. Consider, for example,, a 
columnar transposition with key 2-5-6-1-4-3 applied to a message of 50 letters. It will 
be found convenient m what follows to disregard the identity of the fetters and represent them 
byj .numbers giving their position in the plain text. Ihus, I will mean the first plain-text 
letter ; 2, the second plain- text letter; etc. 



5 6 



A 



t- 

01 02 ' 
Ofr 08? 
13 14 

19 20 
2b 26'. 
31 32 

37 38 
43 44 

49 50 



1 

OS 04 05 
09 10 11 
15 16 17 
21 @>'23 
27 28 29 
33 34 35 
39 40 41 
45 46 47 



' Figure 1 1 : 

The cipher text, obtained; by columnar transposition, in terms of these numbers is 
04-10— 16— 22— 28-34— 40-46— 01— 07— 13-19-25-31— 37-43— 49-0&rl2(-*18T-fi4rj30— 36-421- 
48-05-11-17-23-29-35-41-47-02-08-14-20-26-32-38-44-50-03-09-15-21-27-33- 
39-45. 

The above notation means that the first cipher letter is the fourth plain-text letter, the 
second cipher letter is the tenth plain-text letter, etc. This may be represented as follows: 

Co—. Q.1 02 03 04\05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Ci— _ jjb4 >10 16 22/28 34 40 4^0,1 07 13 19 25 31 37 43 49^06 12 18 

(X— - 21/22- 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 

Ci.... 24\30 36 42 48^)5 11 17 23 29 35 41 47 02 08 14 20 26 32 38 

Co—. 41 42 43 44 45 46 47 48 49 50 

Ci— 44 50 03 09 15 21 27 33 39 45 

Figure 2 
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‘H 97 ft 79 /<>0 /<9/ >07 /cl /of /offal !ol !t>H /*4 Ut Iff //4"> >/? 
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iiHvi-tn ffl , 3 r H qiHO )V Ilf n /flu llf y I qf/q if tfo >SI I? 

>S}'*4 " " 




Here the number in line C 0 represents the position in the cipher text of the letter whose 
position in the plain text is given directly beneath jit. (Notice that the sequence of numbers 
of Ci axe those of the columns of figure 1. The columns have been rearranged according to 
the key and written horizontally in sequence.) 

5. Notation.— For convenience, the following notation will be used: C 0 will represent the 
plain text and alto will be used to enumerate the positions in the cipher text; Ci will represent 
the cipher text resulting from the first transposition and thus also the “plain text” for the 
second transposition; C 2 will represent the cipher text resulting from the second transposition. 

It is seen from figure 2 that the transposition in question replaces the first plain-text 
letter by the fourth, the second plain-text letter, by jthe tenth, the third plain-text letter by the 
sixteenth, etc. ***7 ' 

To effect the second transpositionHhe same operation must be performed on Ci that was 
^performed on C 0 . The first letter of Ci (4 6f C 0 ) must be replaced by the fourth letter of C, 
(22 of C<j) ; the second letter of Ci (10 of C 0 ) must be ; replaced by the tenth letter of Ci (7 of C 0 ) ; 
the third letter of CJj. (10 of C 0 ) must be replaced by the sixteenth letter of Cj (43 of C 0 ), etc. 

The operations discussed above may be represented as in figure 3. In figure 4 is shown the 
result of the operations, where again C 0 is the plain, text (and also used to enumerate the posi- 
tions), Ct the result of the first transposition, and Q» the result of the second transposition. 

This scheme Can now be used to effect a double transposition with the same key. 




T t 

Co Ci , 

01 - >04 

02- 410 
03~>16 

04-*22 

05 - 428 

06 - *34 
07~»40 

08- 446 

09 - 401 

10 - 407 

11 - 413 

12 - >19 

13 - 425 

14 - *31 

15 - 437 

16 - 443 

etc., : . - 

Figure 3 



T,XTi^T 4 

Co Cx Ci C 3 Co Co 

01- 404 04->22=0^-422 

02- 410 10-407= 02-407 

03- 416 16->43 « 03-443 

04- 422 

etc. 
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Co or 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Cx— 104 40 16 22 28 34 40 46 01 07 13 19 25 31 37 43 49 06 .12 '18 

C, §2 07 43 30 17 02 38 21 : 0* 40 25 12 48 35 20 03 39 34 19 06 

Co— -21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 

C, 24 30 36 42 48 05 11 17 23 29 35 41 47 ^>2 08 14 20 26 32 38 

Cj— 42 29 14 50 33 28 13 49 36 23 08 44 27 ID 46 31 18 05 41 26 

Co 41 42 43 44 45 46 47 48 49 50 

Cx 44 50 03 09 15 21 27 33 39 45 

C, 09 45 16 01 37 24 11 47 32 15 

FlGUHB 4 

6. Plain-text cipher-text relationships. — Since the same operation has been effected twice, 
there ought to exist a "plain-text cipher-text” relationship between (C 0 C 1 ) and (CxCj) which 
remains invariant. Such a relationship does exist. Notice that the pairs in (C 0 Cx) are the same 
as those in (CxCj); their relative positions have been changed. For example, under 1 in C 0> we 
find 4 in Cj; under 1 in Cx, we find 4 in C 3 ; under 2 in C 0 , we find 10 in C,; under 2 in Cx, we 
find 10 in C 2 , etc. 

If a third, fourth, . . . nth transposition is effected with the same key, the same phe- 
nomenon will occur and can be used to find C*, C 4 , . . . C„ readily. The pairs in (C 0 Cx), 
(CiC 3 ), (C 2 C»), (C S C 4 ) . . . will all be the same so that C» can be found by writing under C 2 the 
numbers to form the pairs already determined by (C 0 Cx). 

7. Number of different cipher resultants possible with given key and message. — It is possi- 
ble to determine the number of transpositions which may be effected with a given key on a mes- 
sage before the original message is obtained. Using the scheme of figure 4 and the message 
already discussed, the numbers of Cx, C 2 , Cj, . . . C B appearing under the 1 of C 0 will be limited 
to a particular set. The number of elements in this set depends on the number of steps in the 
chain l-»4, 4~»22, 22-»30, . . . , 44-»9, 9-»l, i.e., 38. Similarly, the set of numbers corre- 
sponding to any element in this chain will be of the same length. The last number in any one 
of these 38 sets is always the same as the corresponding number in C 0 so that any number of 
transpositions which is a multiple of 38 will always make the first cipher letter the first plain- 
text letter, the fourth cipher letter the fourth plain-text letter, etc. 

The message being 50 letters long, there are still 12 unaccounted for, the smallest of which 
is 3. We can form a chain for this number in the same way as for 1, viz, 3-»16, 16-*43, 43-*3 
whose length is 3. Any number of transpositions which is a multiple of 3 will make the third, 
sixteenth, and forty-third plain-text letters become the third, sixteenth, and forty-third cipher 
letters, respectively. 

Continuing this process all 50 letters may be accounted for. In this particular case four 
chains \yere needed of lengths 38, 7, 3, and 2. In order that the plain and cipher texts be 
identical, the number of transpositions used must involve each of these numbers as a factor. 
The smallest number possible is therefore the least common multiple of them, 3X7X38, or 798. 

This same notion is applicable to any type of transposition and will determine how many 
steps are needed to regain the original text as a cipher message. 

(Jj // - / i " l $ ’ ' ^ 5 5 * # 7 * 17~ ff 

(2, l 2 - 1 1 " 1 1' 
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Section III 

RECONSTRUCTION OF THE KEY, THE SOLUTION BEING KNOWN 

Paragraph 

Application of paired relationships..; 8 

Test of assumptions. — , — .... 9 

8. Application of paired relationships. — The notions set forth in section II may be used 
to great advantage for the solution of messages enciphered by means of a double transposition. 
The method will be illustrated by several examples, increasing in difficulty. 

Suppose several messages, enciphered by means of a double transposition , have been read 
by anagramming messages of identical .length. In order to read other messages in this same 
key, but of different length, it is necessary to know the key, which can be recovered by applying 
some of the ideas set forth ip section II. 

Let us refter for a min ute to figure 4. The knowledge of line C x is sufficient to recover the 

p 1 ... |q 0| 

keysince ^ ^ indicates that the fourth column was read first, |q° shows that the first column 

o ial 

was next transcribed, shows that the sixth column was the third one transcribed, etc. 

Cj 06 

The complete-key is thus found to be: • 

Keyl 25 ' 6143 
My |l 2 3 4 5 6 

If the message has been read by anagramming, lines C 0 and C 2 are both known, but Ci 
must be reconstructed before the key can be. obtained. The method for reconstructing Ci is, 
in general terms, to assume a width which will enable one to arrange the sequence of numbers 
of Ci to insure -proper pairing of (C 0 Ci) and (C,0 2 ). The procedure will be illustrated by using 
the message of figure 4, assuming Ci unknown. Let- us write the numbers of C 0 and C 2 , leaving 
space for Cj. ... 

C 0 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Ci 

C 2 22 07 43 30 17 02 38 21 04 40 25 12 48 35 20 03 39 34 19 06 

Co 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 

Ci.... 

C 2 „._ 42 29 14 50 33 \28 13 49- 36 23 08 44 27 10 46 31 18 05 41 26 

Co—. 41 42 43 44 45 46 47 48 49 50 

Ci.... 

C 2 -__ 09 45 16 01 37 24 11 47 32 15 . 

, Figure 5 

9. Test of assumptions. — Let us assume- that the keyword is not less than five letters in 
length. As a first case then, suppose the width of;ihe rectangle to be five. The first number 
of Ci must then be 1, 2, 3, 4, or 5. 

08340 — 34 - 2 ( 5 ) 



6 



If it is 1, then the next several are 1, 6, 11, 16, 21, 26, 31, 36, 41, 46; we stop with 46 
since 51 is not possible, there being but 50 letters in the message. Writing these numbers 
in their positions, we have 

Co-— 01 02 03 04 05 06 07 08 09 10, etc. 

Cl— 01 06 11 16 21 26 31 36 41 46, etc. 

C 2 — 22 07 43 30 17 02 38 21 04 40, etc. 

Figure 6 

This is impossible since 1-»1 in (C 0 Ci) contradicts 1 -h> 22 in (C^i). 

The remaining possibilities for width 5 yield similar contradictions, as shown below: 



Assumption Contradiction 



Co— 


01 


02 


03 


04 


05 


06 




Co 


02 


Ci 


02 


Cl— 


02 


07 


12 


17 


22 


27 




Cl 


07 


Ci 


22 


Cl— 


22 


07 


43 


30 


17 


02 


• • • 










C 0 


01 


02 


03 


04 


05 


06 


• • • 


Co 


03 


Ci 


03 


Cl— 


03 


08 


13 


18 


23 


28 


• • • 


c, 


13 


Cl 


22 


Cl— 


22 


07 


43 


30 


17 


02 


• • • 










Co— 


01 


02 


03 


04 


05 


06 


• • • 


C 0 


04 


Cl 


04 


Cl — 


04 


09 


14 


19 


24 


29 


• • • 


Cl 


19 


Cl 


22 


Ci— 


22 


07 


43 


30 


17 


02 












Co— 


01 


02 


03 


04 


05 


06 


• • • 


Co 


05 


Cl 


05 


Cl— 


05 


10 


15 


20 


25 


30 


• • • 


Cl 


25 


Cl 


22 


Cl— 


22 


07 


43 


30 


17 


02 


• • • 











Figure 7 

The transposition rectangle therefore cannot be five columns wide. 

On the assumption of width 6, the initial number of Ci may be any one of the numbers 
1 to 6. The first three yield immediate contradictions. 



Co — 


01 


Assumption 

02 03 04 


05 


06 . . . 


Contradiction 

Co 01 Ci 


01 


Ci— 


01 


07 


13 


19 


25 


31 . . . 


Cl 


01 


c. 


22 


C 2 


22 


07 


43 


30 


17 


02 . . . 










Co— 


01 


02 


03 


04 


05 


06 . . . 


Co 


02 


Cl 


02 


c,— 


02 


08 


14 


20 


26 


32 . . . 


Cl 


08 


Cl 


22 


Cl— 


22 


07 


43 


30 


17 


02 . . . 










Co — 


01 


02 


03 


04 


05 


06 . . . 


Co 


03 


Cl 


03 


Cl — 


03 


09 


15 


21 


27 


33 . , . 


Cl 


15 


Ci 


22 


Ci— 


22 


07 


43 


30 


17 


02 . . . 











Figube 8 
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For the assumption 



|C o 
Cl 



1 

41 



there is f&und 



C« 01 02 03 04 05 06 07 08 . . . 

C! 04 10 16 22 28 34 40 46 . . . 

C 2 22 07 43 30 17 02 38 21 



Figure 9 

This is possible since we have 4-»22 in both (CoCi) and (CiC 2 ). Since (CiC 2 ) yields 
10-»7, (C 0 Ci) should also yield 10->7. Inserting 7 in Ci under 10 of C 0 , no contradiction is 
obtained, since there is room in C t for the number 1 which must precede 7 and we find that 
both (C 0 C,) and (CiC 2 ) yield 1— >4. We now have — 

Co 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17,18 19 20 

C, 04 10 16 22 28 34 40 46 01 07 13 19 25.31 37 43 49 

C 2 22 07 43 30 17 02 38 21 04 40 25 12 48 35 20 03 39 34 19 06 

Co- — . 21 22 23 . . . 

Ci 

C 2 42 29 14 . . . 



Figure 10 

Notice the further checks: 16->43; 13— >25 in both (C 0 Ci) and (QCj). 

Since in (CjC 2 ) we find 22->30, we insert in Ci the number 30'under the 22 of C 0 . There 
is no contradiction, as there are just enough places for the numbers 06, 12, 18, 24, which must 
precede 30. We now have — 

Co—. 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 

Ci 04 10 16 22 28 34 40 46 01 07 13 19 25 31 37 43 49 06 12 18 24 

C 2 — 22 07 43 30 17 02 38 21 04 40 25 12 48 35 20 03 39 34 19 06 42 

Co 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 . . . 

Ci 30 36 42 48 

C 2 29 14 50 33 28 13 49 36 23 08 44 27 10 46 31 18 05 41 26 09 . . . 



Figure 11 

The further checks can leave no doubt in our minds of the fact that we are on the right track. 





Since in 


(Ci 


C 2 ) 


we find 


30->29 


, we 


insert 29 in Ci 


under the 30 of 


! C„. 


We now have — 


Co- 


— 01 


02 


03 


04 


05 


06 


07 


08 


09 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


21 


Ci- 


— 04 


10 


16 


22 


28 


34 


40 


46 


01 


07 


13 


19 


25 


31 


37 


43 


49 


06 


12 


18 


24 


c 2 . 


— 22 


07 


43 


30 


17 


02 


38 


21 


04 


40 


25 


12 


48 


35 


20 


03 


39 


34 


19 


06 


42 


Co. 


— 22 


23 


24 


25 


26 


27 


28 


29 


30 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 


41 


• • i 


Cl. 


— 30 


36 


42 


48 


05 


11 


17 


23 


29 


35 


41 


47 




















c 2 - 


— 29 


14 


50 


33 


28 


13 


49 


36 


23 


08 


44 


27 


10 


46 


31 


18 


05 


41 


26 


09 


• • « 



Figure 12 
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Since in (CiC 2 ) we find 35->8 and 47-»27, we insert 8 in C u under the 35 of C 0 , and 27 in 
Ci under the 47 in C 0 . We now have — 



Co— 


.. 01 


02 


03 


04 


05 


06 


07 


08 


09 


10 


11 


12 


13 


14 


15 


16 


17 


18 


19 


20 


Cu- 


04 


10 


16 


22 


28 


34 


40 


46 


01 


07 


13 


19 


25 


31 


37 


43 


49 


06 


12 


18 


Ct- 


.. 22 


07 


43 


30 


17 


02 


38 


21 


04 


40 


25 


12 


48 


35 


20 


03 


39 


34 


19 


06 


Co— 


.. 21 


22 


23 


24 


25 


26 


27 


28 


29 


30 


31 


32 


33 


34 


35 


36 


37 


38 


39 


40 


Cu- 


24 


30 


36 


42 


48 


05 


11 


17 


23 


29 


35 


41 


47 


02 


08 


14 


20 


26 


32 


38 


Co— 


.. 42 


29 


14 


50 


33 


28 


13 


49 


36 


23 


08 


44 


27 


10 


46 


31 


18 


05 


41 


26 


Co— 


.. 41 


42 


43 


44 


45 


46 


47 


48 


49 


50 






















Cl— 


. 44 


50 


03 


09 


15 


21 


27 


33 


39 


45 






















c 2 — 


. 09 


45 


16 


01 


37 


24 


11 


47 


32 


15 























Figtjbe 13 

Having reconstructed it is a very simple matter to find the key. 
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Section IV 

RECONSTRUCTION OF THE KEY, THE PLAIN-TEXT POSITIONS OF SEVERAL OF 

THE CIPHER LETTERS BEING KNOWN 

Paragraph Paragraph 

The problem presented 10 1 Testing assumptions 12 

Preliminary considerations 11 1 

10. The problem presented. — Suppose the following message is intercepted (the enemy is 
known to be using double transposition). 

LDECS ENREO TNEHE BNGLI ALDTO IIEHE 

TASMK EWANE FACNE FLLAI F 

Later a C. P. is captured and the following plain text found without the work sheets. 

IN CASE OF GENERAL ATTACK THE MAIN LINE OF DEFENSE WILL BE HELD. ' ! 

In order to read other messages, we must reconstruct the key. A frequency table (fig. 14) 
shows the message to have but one B, G, K, M, R, W. 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 



Figure 14 

We can definitely correlate these letters in the cipher text with the same letters in the plain text. 

11. Preliminary considerations. — Let us assign the numerical positions to those letters 
which are definitely known. (The numbers in C 2 are the positions in the plain text of the cor- 
responding letters in the cipher text, e.g., R is the thirteenth letter in the plain text, etc.) 

C LDECSENREOTN EHEBNGLI 

Co.... 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Ci 3, 9 ' ~ W >") 33 3^ b£ Si ! 3* dt itir z A j V 

C 2 iiT *•' ' 13 46 09 

C ALDTOIIEHETASMKEWANE 

C„ 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 



25 21 42 



FACNEFLLAIF 
41 42 43 44 45 46 47 48 49 50 51 

Ur, -•=» - < '’I '4-3 



Figure 15 
(tt) 
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We will find it convenient to write down the numbers corresponding to columns of different 
widths for a message of 51 letters, since the numbers of Ci are these columns rearranged, each 
column being kept as a unit. We thus have, for example, for widths 5-7: 



1- 


01 


02 


03 


04 


05 


1_. 


01 


02 


03 


04 


05 


06 


1_. 


01 


02 


03 


04 


05 


06 


07 


2_. 


06 


07 


08 


09 


10 


2.. 


07 


08 


09 


10 


11 


12 


2.. 


08 


09 


10 


11 


12 


13 


14 


3.. 


11 


12 


13 


14 


15 


3-- 


IS- 


14 


15 


16 


17 


18 


3.. 


15 


16 


17 


18 


19 


20 


21 


4.. 


16 


17 


18 


19 


20 


4.. 


IS 


20 


21 


22 


23 


24 


4__ 


22 


23 


24 


25 


26 


27 


28 


5.. 


21 


22 


23 


24 


25 


5.. 


25 


26 


27 


28 


29 


30 


5.. 


29 


30 


31 


32 


33 


34 


35 


6- 


26 


27 


28 


29 


30 


6.. 


31 


32 


33 


34 


35 


36 


6.. 


36 


37 


38 


39 


40 


41 


42 


7.. 


31 


32 


33 


34 


35 


7_. 


37 


38 


39 


40 


41 


42 


• 7.. 


43 


44 


45 


46 


47 


48 


49 


8_. 


36 


37 


38 


39 


40 


8.. 


43 


44 


45 


46 


47 


48 


8.. 


50 


51 












9- 


. 41 


42 


43 


44 


45 


9.. 


. 49 


50 


51 
























10.. 


. 46 


47 


48 


49 


50 

































11.. 51 

(a) (6) (c) 



Figure 16 

For a width 5 there is 1 column of 11 and 4 columns of 10 letters; for a width 6 there are 
3 coluiAns of 9 and 3 columns of 8 letters, etc. It will be found convenient to prepare a list 
showing the number of letters corresponding to various combinations of short and long columns; 
for example, for width 5 we have 



1X10=10, 1X11=11, 2X10=20, 1X10+1X11=21, 3X10=30, 
2X10+1X11=34, 4X10=40, 3X10+1X11=41,4X10+1X11=51 



and no combination of 



12. Testing assumptions. — Let us suppose the transposition rectangle was 5 columns wide. 
The number of <+ under 8 of C 0 must be either 36, 37, 38, 39, or 40, since the first number 
of Ci must be either 1, 2, 3, 4, or 5. (See fig. 16a.) 

If it were 36, then under the 36 of C 0 , we must place 13 of Ci. This is impossible, since 

this would place the beginning of a column 1 under 34 j^ 0 ’ ^ ^g ^ 

short and long columns will yield such a result. (No combination of 10’s and one 11 is equal 
to 33.) 

The remaining possibilities yield similar contradictions as shown below./ 

1 By a column of C|, we shall understand a sequence of numbers which come from a column of the trans- 
position rectangle. 
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Assumption 

C 0 08 
C, 37 
C 2 13 

C 0 08 
C, 38 
C 2 13 
Co 08 
Cj 39 
C 2 13 
C 0 08 
C t 40 
C 2 13 



11 



Co 35 36 
C, 03 08 



Contradiction 

37 

(nXlO+11^34)! 



C 0 36 37 
C t 03 08 



38 

13 



(nX10+ll+35) 



Co 37 38 
Cr 03 08 



39 

13 



(nX10+llX36) 



Co 38 39 
C, 03 08 



40 

13 



(nX10+11^37).- 



Figtjre 17 



The transposition rectangle is therefore not 5 columns wide. 

Suppose the width to be 6. This means 3 columns of 9 and 3 columns of 8 letters. (See 
fig. 166.) 

1X8=8, 1X9=9, 2X8=16, 1X8+1X9=17, 2X9=18, 3X8=24, 
2X8+1X9=25, 1X8+2X9=26, 3X9=27, 3X8+1X9=33, 2X8+2X9=34, 
1X8+3X9=35, 3X8+2X9=42, 2X8+3X9=43, 3X8+3X9=51“ 

The number of Cj under the 8 of C 0 must be either 43, 44, 45, 46, 47, or 48. (See 
fig. 166.) 

If it were 43, then under the 43 of C 0 , we must place 13 of C 2 . This is impossible, since 
it would place the beginning of a column under 41. 

If it were 44, then under the 44 of C 0 , we must-place 13 of C 2 . This is impossible, since 
it would place the beginning of a column under 42. 

If it were 45, then under the 45 of C 0 , we must place 13 of C : . This is possible, since it 
would place the beginning of a column under 43 and 3 short and 2 long columns make this 
possible. (3X8+2X9=42.) This information added to figure 15 gives the following: 
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Figure 18 



i No combination of 10’s and one 11 can equal 34. 



12 



There are several checks which seem to indicate that this is the correct arrangement. From 
(C 0 C,) we find 43->l also 1— >3. This means that under the 1 of C t must go 3 of C 2 , indicating 
that the corresponding letter, C,is the third letter of the plain text. There is no contradiction, as 
the third plain-text letter is a C. Similarly, from 1— >3, 3— >15, we place 15 of C 2 under 3 of Ci. 
(See fig. 19.) This indicates that the corresponding letter, L, is the fifteenth letter of the plain 
text. There is no contradiction, as the fifteenth plain-text letter is an L, etc. 

From (C 0 Ci) we find 2— >9; we must therefore place 2 of Cj over the 9 of C 2 . This involves 
no contradiction, as a column may begin under 18 of C 0 (1X8+1X9=17). From (C 0 Ci) we find 
4->21 ; we must therefore place 4 of Ci over 21 of C 2 . This involves no contradiction, as a col- 
umn may begin under 35 of C 0 (2X9+2X8=34). Adding this new information, we have — 
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Figube 19 

From (CiQj) we can now obtain 16-»42, so that 42 of C 2 goes under 16 of C 0 . Inserting 
this, we have — 
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Obviously, the column headed by 5 must go into the blank spaces. From Ci the key is 



found to be 



e 



3 15 4 2 
2 3 4 5 6 



That this is correct may be verified by using the rectangle. 



6 3 1 5 4 2 
C G L K I 0 
N L D E E T 
E I E W H N 
F A C A E E 
L L S N T H 
L D E E A E 
A T N F, S B 
I 0 R A M N 
FIE 



6 3 1 5 4 2 
INCASE 

0 F G E N E 
R A L A T T 
A C K T H E 
M A I N L I 
NEOFD'E 
FENSEf 

1 L L B E H 
ELD 



Figure 21 



Section V 

RECONSTRUCTION OF THE KEY, THE RELATIVE POSITION IN THE PLAIN TEXT OF 

SEVERAL LETTERS BEING KNOWN 





Paragraph 
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Preliminary considerations... 
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13. The problem presented. — Consider the following two messages of identical length. 



C A T 0 I 
I I Y Q E 



D I N S E 
g 0 0 A 0 



U W E L L 
AEDDL 



A T R E W 
R A N M Y 



WT.SRS 
D S E H A 



T T V D P 
I H H U 



SADTL 

OTYAR 



A N I F N 
Y T T W E 



LANHT 
g C N V C 



R A E U V 
IGIRN 



N H M T E 
0 I A D 4 



S S S H E 
R 0 A H 



Anagramming yields 





It may be possible to read the messages com- 



pletely by anagramming, but the following procedure is believed to be simpler. 

14. Preliminary consideration. — Consider 1 the second message, assuming the width of the 
rectangle to be 8. 

1 01 02 03 04 05 06 07 08 

2 09 10 11 12 13 14 15 16 

3 17 18 19 20 21 22 23 24 

4 25 26 27 28 29 30 31 32 

5 33 34 35 36 37 38 39 40 

6 41 42 43 44 45 46 47 48 

7 49 50 51 52 53 54 55 56 

8 .... 57 58 59 



Figure 22 



1 It is advisable that the reader himself carry out the steps outlined, writing the cipher message and Co in 
ink and C! and Cj in pencil, to allow erasures. 
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c 2 . 

Co- 

c 1 - 

C 2 - 

Co- 

Ci. 

c 2 . 
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SAUTLANIFNLANHTRAEUV 
01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 



NHMTESSSHEOTYARYTTWE 
21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 



RCN VCIGIRNO IADAROAH 
41 42 43 ! 44 45 46 47 48 49 50 51 *52 53 54 55 56 57 58 59 
I v_ 






Fig dee 23 



The underlined letters are those underlined in C A V A L R Y, viz, those which could 



be determined uniquely; there are two possibilities each for 



A , A 
A mi R 



If p represents the 



position of C in the plain text, the positions of V, A, L, Y are respectively (p + 2), (p +3) , (p -f 4), (p + 6) . 

15. Testing assumptions. — If the last three columns in C t were long, the numbers of Ci 
corresponding to Y and V, letters number 36 and 44 of the cipher text, respectively, would be 
1, 2, or 3, the initial numbers of the long columns. (See fig. 22.) This would make it impossible 
for the plain-text positions of V and Y (i.e., the corresponding numbers in C 2 ) to differ by 4, as 
the number of Cj under 1, 2, 3 of C 0 aTe x, x + 8, x 16, . . . and differ by at least 8. At least 
one of the last three columns is a short one. 

Suppose the last two columns to be long. Since a long column has 8 letters, the number of 
Cx under 44 of C 0 is 1, 2, or 3, and the number of Ci under 42 of C 0 must be the next-to-last 
one of a short column, i.e., either 44, 45, 46, 47, or 48. (See fig. 22.) 

Suppose 1 of Ci is under 44 of C 0 . With this assumption we must test 44, 45, ... 48 



in Ci under 42 of C 0 in turn. 



Co 42 
Ci 44 



and 



Ci 44! 

C 2 01 



make C the first letter of the plain texti. 



Since V would then have to be the third letter of the plan text, 3 of C 2 must go under 1 of 



Ci or 44 of C 0 . Since (CjC 2 ) yields 1- 
23, this would be as follows: 



>3, 3 of Ci must go under 1 of C 0 . Inserted in figure 
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i Because of the assumption that 44 -»l in (QA). 
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The number of C, under 36 of C 0 is either 52, 53, 54, 55, 56, 57, 58, or 59 (the last num- 
ber of a column). Since the corresponding Y has to be the seventh of the plain text (we saw 
that C is to be the first of the plain text) then 7 of C, would have to go under either 52, 53, 54, 
55, 56, 57, 58, or 59 of C 0 . This is impossible, as the last column has been assumed to be 

long and 7 is in a short column. Therefore j^ 0 is impossible. 

If 45 of C, were under 42 of C 0 , 9 of C 2 would have to go under 45 of Ci or 42 of C 0 , 
because 42->45 and 45— >9. This would make C of CAVALRY the ninth letter of the plain 
text and V the eleventh. Tliisis impossible,, since this would place 11 of C 2 under 1 of Ci and 
therefore 11 of C 2 under 1 of C 0 , whereas the number of Ci under 1 of C 0 must be 01, 02, . . . 08. 
For similar reasons, we find that 46, 47, or 48 of C : cannot go under 42 of C 0 . Therefore 1 
of Ci is not under 44 of C 0 .i 

Suppose 2 of Ci is under 44 of C 0 . If 44 of Ci is under 42 of C 0 , then 2 of C 2 is under 44 
of Ci. This would make the Y of CAVALRY the thirty-sixth cipher letter, the eighth of the plain 
text. This is impossible, since as before the number of Ci under 36 of C 0 is 51, 52, . . . 59, 
and these numbers of C 0 cannot be over 8 of Ci, as this would make the last column short.i 

If 45 of Ci is under 42 of C 0 , then 10 of C 2 is under 45 of C,, since 42->45and 45->10. 
Since the C of CAVALRY must be the tenth plain-text letter, V must be the twelfth, so that 12 
of C 2 must go under 2 of Ci or 44 of C 0 . This makes the Y of CAVALRY the sixteenth plain-text 
letter. This is impossible, since as before either 52, 53, ... or 59 of C, would be over 16 
of Ci, necessitating either 52, 53, ... or 59 of C 0 to be over 16 of Ci ; and 16 is in a short 
column.x 

If 46 of Ci were under 42 of C 0 , then 18 of C 2 would have to go under 46 of Ci, since 42-»46 
and 46^18. This would make V of CAVALRY the twentieth plain-text letter, placing 2 of Ci 
over 20 of C 2 . This is impossible, since 2 of C 0 can be over only 9, 10, 11, ... or 16 of Ci. 
(See fig. 22.) For similar reasons 47 and 48 of C a cannot be under 42 of C 0 . Therefore 2 
of Ci is not under 44 of C 0 .i 

Suppose 3 of Ci is under 44 of C 0 . If 44 of Ci is under 42 of C 0 , then 3 of C 2 must be under 
44 of Ci, since 42— >44, 44— >3. This will make V of CAVALRY the fifth letter of the plain text. 
This is impossible, since 3 of Ci over 5 of C 2 implies 3 of C 0 over 5 of Ci, whereas 3 of C 0 must 
be over 17, 18, 19, ... or 24 of Ci. (See fig. 22.) For a similar reason 45 of Ci cannot be 
under 42 of C 0 .i 

If 46 of Ci is under 42 of C 0 , then 19 of C 2 is under 46 of Ci, since 42->46 and 46— >19. 
This means that 21 of C 2 must be under 3 of C ; and therefore 21 of Ci under 3 of C 0 , which is 
possible. The fact that Y will be the twenty-fifth plain-text letter, placing 25 of C 2 under 36 
of Co and either 52, 53, . . . or 59 of Ci, involves no contradiction as yet, since 25 is in a long 
column and 52, 53, . . . 59 of C 0 must be over a number of Ci coming from a long column.i 

The number of Ci which goes under 36 of C 0 must be 55 to enable 25 which is the fourth 
number of the first column to fit in properly in Ci- Inserting this information, we obtain — 

i It is advisable that the- reader himself carry out tHe steps outlined, writing the cipher message and C 0 in 
ink and Ci and C 2 in pencil, to allow erasures. 
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Figure 25 








We find a further check. (G 0 Ci) gives 3 9 -*2 2 and (CiC 2 ) also gives 39-^22. We canl ocate 


n 

J 


one more column, since (C 0 Ci) gives 32— »23, so that 32 of Ci goes over 23 of C 2 


or under 11 


i 


' f 0 W f 0 

of C 0 . The portion of Ci, now filled in, gives as part of the key, h g 3 4 5 6 7 


g>* Let us 




now use the transposition rectangle to verify and complete the solution. 
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There is now no doubt that we are on the right track. 


To fit in INFANTRY as the second I 




word, the complete key is 8-3— 7— 4— 1-6-5-2. 
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SOLUTION OF MESSAGES ENCIPHERED BY A DOUBLE TRANSPOSITION CIPHER 

SYSTEM 
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16. The general problem. — In the previous sections we have reconstructed the key to a 
double transposition cipher, starting with a great deal of information and progressively decreasing 
the amount of known information. Given a series of messages our problem is not any different. 
If one or more of the messages 1 contains a Q then we can definitely say that the Q must be 
followed by a U. By proceeding as in the previous sections, we can eliminate various lengths 
of keys and arrangements of columns and eventually read the message. If there is no Q, then 
the assumption of probable digraphs, trigraphs, or words will enable one to reach a solution. 
The actual manipulation is easier than it appears to be and provides a straightforward procedure 
which will eventually yield the solution. 

17. Summary. — To summarize, the essential features of the method and its application 
are the following: 

(1) The invariance of (C 0 Ci), (CiC 2 ) pairs. 

(2) The assumption of probable widths. * 

(3) The assumption of plain-text position of certain cipher letters (if necessary). 

(4) The elimination of incorrect widths by contradictions of — 

(а) Known cipher-text plain-text relationships (relative position of letters, 

final X’s, etc.). 

(б) Improbable arrangement of plain text (unlikely digraphs, trigraphs, etc.). 

It is interesting to note that the method was applied to read intercepted messages of a 

well-organized group of smugglers. It was discovered that these persons were using a single 
columnar transposition method with keys from 10 to 20 letters long. Soon a double transpo- 
sition was introduced, but the messages were read. 

A series of messages including some actual intercepts is appended hereto and will serve 
the reader as an interesting set of problems. 

1 More than one message can be employed, since an assumption as to position of numbers and length of 
columns in one message, imposes a definite position in the others. 

( 18 ) 
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Section VII 

DOUBLE TRANSPOSITION WITH DIFFERENT KEYS 

Paragraph 



Analysis of the system. ... ... * . 18 

Example of procedure . 19 



18. Analysis of the system. — In the preceding sections we limited ourselves to a study of 
double transposition with the same key. It happens that a very similar procedure is applicable 
to the case in which a message undergoes columnar transposition twice, using different keys. 

For the sake of convenience, suppose we consider a 19-letter message transposed with the 
key 5-4-2— 1—3 and then 1-2-6— 3-5-4. 

5 4 2 1 3 

01 02 03 04 05 

06 07 08 09 10 
11 12 13 14 15 
16 17 18 19 

C r : 04 09 14 19 03 08 13 18 05 10 15 02 07 12 17 01 06 11 16 
1 2 6 3 5 4 



04 09 14 19 03 08 
13 18 05 10 15 02 
07 12 17 01 06 11 
16 

C 2 : 04 13 07 16 09 18 12 19 10 01 08 02 11 03 15 06 14 05 17 

Figure 28 

In figure 28 Ci is the text after the first transposition and C 2 the final text. 

Let us analyze this case as we did the previous cases. 

C 0 .-_. 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 
Cu 04 09 14 19 03 08 13 18 05 10 15 02 07 12 17 01 06 11 16 

Figure 29 

Figure 29 represents the first transposition. 



Let us use a similar representation for the operation of the second key on a 19-letter message. 

06 Q7 08 09 10 11 
08 14 04 10 16 06 

Figure 30 



Co—- /0L 02 03 04 05 
Ci— i^Ol 07 13 19 02 



112 13 14 15 16 17 18 19 






2, 18 05 11 17 03 09 15 



According to figure 30, the first plain-text letter is replaced by the first, the second plain- 
text letter by the seventh, etc. 

( 10 ) 



t 






20 






If the second key were the only one applied to the message, then figure 30 would be sufficient. 
However, the correct plain text for the second key is Ci of figure 29. If we combine figures 29 
and 30 and apply the operations of the second key to Ci of figure 29, we shall obtain the proper 
cipher message. j . . . ( 

Co 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 

Cx 04 0§ 14 19' 03 08 13 18 05 10 15 02 07 12 17 01 06 11 16 

C,'-,- 01 07 13 19 02 08 14 04 10 16 06 12 18 05 11 17 03 09 15 

C 2 04 13 07 16 09 18 12 19 10 01 08 02 11 03 15 06 14 05 17 

Figure 31 

Let us study figure 31 with respect to the operations of figures 29 and 30. C 0 is the plain 
text and is also used to enumerate the positions. Ci indicates the result of the first transposition. 
The pairs of C 0 Cx' indicate the operations of the second transposition, the plain text for which 
is Cx. Thus, the second transposition replaces the first plain-text letter of Cx (4 of C 0 ) by the 
first letter of Cx (4 of C 0 ) ; therefore the first letter of C 2 is 4. The second trarisposition replaces 
the second letter of Cx (9 of C 0 ) by the seventh letter of Cx (13 of C 0 ) ; therefore the second letter 
of C 2 is 13, etc. 

The invariance of pairs is maintained in this case also, but now the relationship is (C 0 Cx), 
(Cx'C 2 ). (In the previous case where the two keys were the same, Cx and Cy coincided.) 
Thus, notice the pairs l-»4; 7— >13; 13->7; etc., in (C 0 Cx) and (Cx'C 2 ). 

The method: for recovery of the key or- solution of a message is similar to the procedure 
already outlined. In this case, the assumption as to the length of key may be made for Cx or Cx', 
the length of the other key will be determined therefrom. 

19. Example of procedure. — A simple example will make this clear. Suppose that by ana- 
gramming, the following message has been determined: 

23-16-07-37-30-20-15-29-22-13-06-36-26-21-17-10-01-31-24-14-09- 

05-35-28-19-12-02-32-27-11-04-34-25-18-08-03-33 



Let us write out C 0 and C 2 , leaving room for Cx and C/. 

Co 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

C,- — 

Cx'— - • 

c 2 — 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

Co---- 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

Cxi— : 

Cx'— - 

C 2 09 05 35 28 19 12 02 32 27. 11 04 34 25 18 08 03 33. 



Figure 32 

Suppose the second key were 5 wide. Then Cx' would begin with one of the sequences 
1, 6, 11, . . .; 2, 7, 12 . . 3, 8, 13, . . .; 4, 9, 14, . . .; or 5, 10, 15, . . . Let 

us try each in turn: The first possibility ... 



Cx' 01-06-11-16-21-26-31-36 

' - C 2 ._— 23-16-07-37-30-20-15-29 

involves the following set-up for C 0 , Cx, Cx', and C 2 : 



) 
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02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 
16 07 37 

06 11 16 21 26 31 36 

16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

20 15 29 

05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Figure 33 

It is doubtful that Cj begins with 23. Let us test the second possibility. 

C 0 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

C, 23 16 07 37 

C,'— . 02 07 12 17 22 27 32 37 

C 2 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

Co 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

C, 30 20 15 29 

C,'.___ 

C 2 09 05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Figure 34 

In order for 23 in Ci to be the second of a column, the key for Ci must be at least 12 letters 
wide. Let us draw up a table showing the number of long and short columns for different 
widths and immediately eliminate those which do not fit in properly with 7 of Ci under 
12 of C 0 . 



Width of 
key 


Long and short 
columns 


12 


1-4, 11-3 


13 


11-3, 2-2 


14 


9-3, 5-2 


15- 


7-3, 8-2 


16 


5-3, 11-2 


17 


3-3, 14-2 


18 


1-3, 17-2 



We stop with 18 because it is doubtful that the key for Ci is much longer. 

Width 12 is immediately impossible since 4+nX37^ 11. Widths 13-18 are apparently possi- 
ble since 3X3+2 = 11 or 3+4X2=11. For width 13, the 7 of Ci is to be followed by 20. But 
13— >20 in (C 0 Ci) and 27->20 in (Ci'C 2 ) contradict so that width 13 is impossible. For width 
14 the 7 of Ci is to be followed by 21. The pair 13— >21 in (C 0 Ci) inaplies 13— >21 in (C/C s ). 
This is impossible since 13 in C/ cannot be placed over 21 of C 2 or under 14 of C 0 and still allow 
for a proper arrangement of C/ ; therefore width 14 is impossible. Similar results will be found 
for the remaining widths. 1 

The third possibility for C x ' yields the following set-up : 

1 It is suggested that the reader carry out the details omitted. 



Co--- 01 

C, 23 

Ci'-._ 01 
C 3 23 

Co 21 

C t 30 

C/..„ 
c 2 — 09 










22 



Co 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Ci 23 16 07 37 

(V 03 08 13 18 23 28 33 

C„~— 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

C 0 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

Ci 30 20 15 

Ci'.... 

C 2 09 05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Figure 35 



In order for 23 In Ci to be under 3 of C 0 , the key for Ci must be at least 8 letters wide. 
Let us again indicate the number of long and short columns pertaining to each possible width. 



Width of 
key 


Long and short 
columns 


8 


6-5, 3-4 


9 


1-5, 8-4 


10 


7-4, 3-3 


11 


4-4, 7-3 


12 


1-4, 11-3 


13 


11-3, 2-2 


14 


9-3, 5-2 


15 


7-3, 8-2 


16 


5-3, 11-2 


17 


3-3, 14-2 


18 

■ 


1-3, 17-2 



Widths 8 and 9 are impossible since 16 of Ci cannot be fitted in any arrangement of col- 
umns of length 5 and 4. Width 10 is impossible since for 7 of Ci to be under 13 of C 0 the 
first four columns of Ci must be long and 16 of Ci cannot be the last of a column (under 8 
of Co). Similar contradictions will be found for the other possibilities.* 

The fourth possibility for C/ yields the following set-up: 



Co 01 02 03 04 05 06 07 08 09 10 11 ll2\ 13 14 15 16 17 18 19 20 

Ci 23 16 V J 07 37 

C/ 04 09 14 19 24 29 34 

C 2 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

Co 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

Ci—— 30 20 15 

Cl'- — 

C 2 — 09 05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Fiemw 36 



* See note, p. 21. 



* 
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For 23 of C t to be under 4 of C 0 , the key for Cj must be at least 6 letters long. For a 
width 6 there are 5 columns of 6 letters and 1 column of 7 letters. It is possible to fit 7 of Ci 
under 14 of C 0 since 2X6 = 12 (7 is the second of a column). If the key for Ci is 6 letters long, 
then Ci must begin with 5-11-17-23-29-35. This means that 29 of Ci is under 05 of C 0 
and therefore 05 of C/ over 29 of C 2 . For a key of width 6 for Ci, having the positions in Ci 
of one of the numbers of each column, we can fit in all of Ci. If this is done we get the following: 

C 0 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

C! 05 11 17 23 29 35 04 10 16 22 28 34 01 07 13 19 25 31 37 06 

Ci' 04 09 14 19 24 29 34 05 10 15 20 25 30 35 

C 2 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

C 0 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

Ci 12 18 24 30 36 02 08 14 20 26 32 03 09 15 21 27 33 

Ci'.... 

C 2 09 05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Figure 37 

‘We find acheck in that (C 0 Ci) and (Ci'C 2 ) bothshow 10-22. Apparently, we are on the right 
track. The rest is, of course, simple, just a question of combining the proper pairs in Ci'C 2 
according to those of C 0 C!. 

The final result is as follows: 

C 0 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 

Ci 05 11 17 23 29 35 04 10 16 22 28 34 01 07 13 19 25 31 37 06 

C/ 04 09 14 19 24 29 34 05 10 15 20 25 30 35 03 08 13 18 23 28 

C 2 23 16 07 37 30 20 15 29 22 13 06 36 26 21 17 10 01 31 24 14 

Co 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 

Ci 12 18 24 30 36 02 08 14 20 26 32 03 09 15 21 27 33 

C/ 33 01 06 11 16 21 26 31 36 02 07 12 17 22 27 32 37 

C 2 09 05 35 28 19 12 02 32 27 11 04 34 25 18 08 03 33 

Figure 38 

From Ci we find the first key to be j 1 _ 2 _. 3 _ 4 ._ 5 _ 6 } an< ^ ^ rom the second key to 

, J4-5-3-1-2 

be \l-2-3-4-5 ' 

It is thus seen that there exists no radical difference in the procedure when the keys are 
different from that when the keys are the same. 

No further illustrative examples will be given. 
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APPENDIX 

1. Given that the width of the transposition rectangle is 8 columns and that the phrase 
JAPANESE NEGOTIATIONS is in the cryptogram, solve the following and reconstruct the 
key: 

REIOH E GATT SWRSE SSCWP JOLPI 

ESLRN I A R N 0 HSCUE AOAEL ETNUY 

TEEBS OATLI NAINH TAAGN TEDGI ^ 

T L.L C G 

2. Solve and reconstruct the key for the following cryptogram which is enciphered by a 
completely filled rectangle and contains the phrase NO DIVISIONS ARE: 

NOIAN SBEKR OEIOD EIOEH TRRVT / 

NOINN TINAT-ROSNW SNKNN NVOIE 

ISRIO EADSO SHLER POEAR WE 

3. Solve and reconstruct the key for the following, enciphered with a rectangle of 9 columns: 

EEEEO ERGVC BISIW E I C FN KYLRA 

PNLRT ADDLE BNBGR..RNRER ITGOU 

HERLO WPIEH TEAOD SGSCY Nu' 

4. Both the following messages were enciphered by completely filled rectangles and both 
are in the same key. Solve them and reconstruct the key: 



T 


S 


L 


E 


D 


0 


I 


I 


I 


T 


JT N O D 


D 


I PI 


N 


S 


A 


P 


F 


S 


Y 




N 


S 


A 


0 


R 


I 


R 


E 


M 


E 


E 


L Y T 


A 


SAM 


Q 


S 


T 


T 


D 


E 


M 


** 


U 


I 


Y 


B 


E 


S 


R 


I 


R 


D 


E 


R H 0 


E 


RIO 


V 


E 


E 


E 


1 








Y 


W 


0 


D 


W 


0 


I 


M 


T 


S 


R 


R E W 


I 


U R B 


D 


R 


K 


V 


R 


N 


N 




E 


M 


S 


F 


N 


B 


N 


0 


I 


N 


N 


T C I 


N 


E S P 


E 


A 


T 


S 


0 


R 


E 




G 


A 


T 


M 


A 


F 


S 


I 


E 


I 


R 


D W F 


Q 


I W 0 


T 


M 


L 


E 


0 


T 


P 




F 


I 


D 


0 


T 


M E 


T 


C 


Y 


S 


N A I 


G 


M MI 


G 


L 


L 


Y 


0 


E 


E 




N 


E 


Y 


N 
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5. The following rum-runner messages have been partly reconstructed by anagramming. 
The enciphering rectangle is incompletely filled. Complete the solution and reconstruct the 
key: 

( 1 ) 



E D E I 


R 


B 


F 


T 


S 


E V 


0 


T X 


A 


T 


D 


N 


A 


X 


E 


P 


P 


U 


D 0 G 0 


S 


I 


Y 


0 


N 


C S 


G 


E M 


E 


R 


W 


I 


L 


I 


B 


W 


R 


R 


I A N E 


0 


U X L 


MAE 


S 






































(2) 
























0 M E H 


s 


E 


R 


L 


S 


U C 


0 


E X A 


U 


T 


F 


L X 


W 


FRY 


S E ft T 


R 


C 


B 


U 


P 


H Y A 


0 T 


D 


0 


R N A 


P 


F 


C 


U 


E 


T E E E 


B 


T 


X 


S 


N 


E I 


L 

























(1) W I L L B E 0 N P 0 S I T I 0 N W E D N E S D.A Y A T F O.U R P M ■ j 

(2) CHASEDQFFBYCUTTERIMPQSSIBLERETURM £ 

6. Given the width of rectangle as 7 columns, and the known text TOMORROW, solve 



the following: . 








if 

Of 


T T 0 I R 


0 T T E 0 


A F N H P 


EORLT GOJPR 


•i 


E Y I E W 


I 0 E T N 


IICTTT 


MNRPC LEWOM 




LHBET 


R E I R E 


0 S S N 




: 


7. Given the width pf rectangle as 7 


colymns, solve the following: 




GOHU P 


I A ROT 


P 0 D A U 


SOIXR RECRA 


< * . 


V Y U R A 


L T B 0 N 


N A T 0 G 


F M N R T R T 


' y 



8. The following three messages with different keys are intercepts of rum-runner traffic. 
Solve the messages and reconstruct .the numerical and the literal keys., X's were used as nulls 
to make the total number of letters a multiple of four. 

( 1 ) 

DEC 26, 1932 CHAS EDWARDS FROM BELIZE CK 10, 

HGLT IGTI HTEE HTHR Y G 0 D NIOG 
CNUT EXII TEAY VFEX 



i. 
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( 2 ) 

MAR 20, 1933 BELIZE FROM NEW ORLEANS CK 28 



R 


N T 


I 


R 


N 


Y H 


S 


L 


E 


E 


X V 


E 


N 


U 


V 


0 


T 


E 


R M 


C 


P 


T U 


E 


E 


D 


I 


0 


E 


C 


M 


T 


0 A 


H 


E 


V 


R 


P 


I 


N 


T X 


W 


R 


E D 


Y 


J 


L 


E 


E 


N 


A 


T 


E 


R 0 


A 


I 


M 


U 


V 


N 


S 


P T 


S 


S 


E 0 


D 


I 


I 


Y 


W 


F 


E 


A 


0 


V T 


E 


F 


H 


I 


0 


E 


G 


G T 


I 


R 


U T 


I 


F 


H 


U 


0 


X 


Y 


E 


T 


B 0 


F 


I 




































(3) 




















APR 8, 


1933 


BELIZE 


AND 


NEW 


ORLEANS FROM CORAZEL 


CK 22 


E 


N D 


S 


M 


K 


S 


N 


0 


U 


0 


D 


R E 


I 


X 


G 


Y 


T 


I 


0 


E A V 


L 


T A 


R 


Y 


H 


T 


E 


T 


E 


I 


Z 


T X 


G 


D 


D 


N 


T 


B 


H 


R A 


H 


C 


T E 


E 


P 


U 


I 


A 


R 


R 


I 


R 


E X 


N 


R 


G 


U 


N 


S 


L 


T 0 


0 


I 


C E 
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